Lead Compliance Analyst

HubSpot; Deutschland; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Jobtailor is seeking a seasoned IT Compliance professional to lead third‑party audit execution, evidence gathering, and onboarding for new products. You will partner with Engineering, Product, and Finance to address control design, readiness assessments, remediation, and programmatic compliance over time.

Hands‑on expertise with SOC 1/2, ISO 27001, SOX 404, HIPAA/PCI and AI governance is required; you will own complex initiatives end‑to‑end and communicate clearly.

Qualifikationen

• Extensive experience in IT Compliance or Security GRC in a SaaS/tech environment.
• Hands-on with SOC 1/2, ISO 27001, control automation, and design/readiness assessments.
• Familiar with SOX 404, HIPAA/PCI, and AI governance frameworks.
• Experience partnering with Product and Engineering on compliance matters.
• Ability to own complex compliance initiatives end-to-end and communicate clearly.

Aufgaben

• Oversee the third‑party audit execution lifecycle, including evidence gathering, walkthroughs, and stakeholder management
• Lead compliance onboarding for new products, features, and major engineering changes
• Review control design and operational readiness prior to go‑live
• Provide clear, actionable guidance to teams on control expectations and evidence requirements
• Lead implementation for new and evolving compliance obligations
• Work directly with Engineering, Product, and Finance partners to support remediation of control gaps
• Validate corrective actions and ensure issues are fully resolved
• Track recurring issues and surface systemic risks to leadership
• Identify opportunities to reduce manual effort through better design, standardization, and automation
• Partner with Security Automation and Engineering teams to support programmatic compliance checks over time

Kenntnisse

IT Compliance

Security GRC

SOC 1/2

ISO 27001

Control automation

Control design

Issue remediation

SOX 404

HIPAA/PCI

AI governance

Product & Engineering collaboration

End-to-end ownership

Communication skills

Jobbeschreibung

Responsibilities

• Oversee the third‑party audit execution lifecycle, including evidence gathering, walkthroughs, and stakeholder management
• Lead compliance onboarding for new products, features, and major engineering changes
• Review control design and operational readiness prior to go‑live
• Provide clear, actionable guidance to teams on control expectations and evidence requirements
• Lead implementation for new and evolving compliance obligations
• Work directly with Engineering, Product, and Finance partners to support remediation of control gaps
• Validate corrective actions and ensure issues are fully resolved
• Track recurring issues and surface systemic risks to leadership
• Identify opportunities to reduce manual effort through better design, standardization, and automation
• Partner with Security Automation and Engineering teams to support programmatic compliance checks over time

Requirements

• Extensive demonstrated experience in IT Compliance or Security GRC, preferably in a SaaS or technology‑driven environment
• Strong hands‑on experience with:
  • SOC 1 / SOC 2 or ISO 27001
  • Control automation or GRC engineering
  • Control design and readiness assessments
  • Issue remediation and audit support
• Familiarity with:
  • SOX 404
  • HIPAA and/or PCI
  • ISO 42001, NIST AI RMF, AIUC‑1, or other AI and agentic control frameworks
• Experience partnering with Product and Engineering teams on compliance matters
• Ability to independently own complex compliance initiatives end‑to‑end
• Strong written and verbal communication skills